Mark Minasi's Tech Forum
Register Calendar Latest Topics
 
 
 


Reply
  Author   Comment  
charlesnm

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 10
Reply with quote  #1 


I have look over Event Logs and unable to find who rebooted it other than the time it was rebooted. 

Any one have a good some suggestions how i can find out who or what rebooted Domain Control?  


Regards,

Charles 

0
donoli

Senior Member
Registered:
Posts: 530
Reply with quote  #2 
Is Automatically Restart checked in the Startup & Recovery settings under System Properties?
0
nikolas.e

Senior Member
Registered:
Posts: 140
Reply with quote  #3 
Did you check event logs,system for Event  ID 1074? For example i just check with one of my servers and this ID says : The process explorer.exe has initiated the restart of computer computername on behalf of user domainame\username for the following reason.
__________________
Just call me the 1000Questionsguy
0
wobble_wobble

Avatar / Picture

Associate Troublemaker Apprentice
Registered:
Posts: 832
Reply with quote  #4 
Quote:
Originally Posted by charlesnm


I have look over Event Logs and unable to find who rebooted it other than the time it was rebooted. 

Any one have a good some suggestions how i can find out who or what rebooted Domain Control?  


Regards,

Charles 



If you have unique users for admins...
Use the reboot time and find out who was the last to log one and potentially create a shutdown event.
check Update history and updates applied.

really paranoid...Remember that shutdown events can be scheduled for some time in advance

Quote:

shutdown /?
...
Set the time-out period before shutdown to several years.
The valid range is 0-315360000 (10 years), with a default of 30


__________________
Have you tried turning it off and walking away? The next person can fix it!

New to the forum? Read this
0
Previous Topic | Next Topic
Print
Reply

Quick Navigation:

Easily create a Forum Website with Website Toolbox.